Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: rl4gHbP4er+xy6LwUmykpO0RK6mJaX12OMmGBGgP2js=
Subject key identifier: AC:F9:B3:D5:D0:9B:83:87:AD:FD:E4:92:79:BB:B8:92:13:4A:11:DC
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 01A0C2564F131035DAD2D4FBE659650B3989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0824
Signing time: Mon 21 Sep 2026 05:00:31 +0000
Manifest this update: Mon 21 Sep 2026 05:00:31 +0000
Manifest next update: Tue 22 Sep 2026 05:00:31 +0000
Files and hashes: 1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: DZ7hsITWCNgbgIC6WtlRCWDAE+ts1Jb3Bo/nUf24s/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:4f:13:10:35:da:d2:d4:fb:e6:59:65:0b:39:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Sep 21 05:00:31 2026 GMT
Not After : Sep 22 05:00:31 2026 GMT
Subject: CN=acf9b3d5d09b8387adfde49279bbb892134a11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:4f:de:af:26:e2:7a:de:ab:41:85:e4:fd:
72:e8:67:a3:48:00:5d:05:c1:db:c0:c2:b2:64:61:
71:09:75:da:2e:55:0d:0a:98:03:d0:05:53:e3:84:
90:5d:c0:4d:ad:0b:a8:70:d9:8a:2c:99:f3:82:84:
d5:bb:f4:1e:e6:2a:cc:f5:b0:ae:ed:06:6a:dd:b3:
1c:32:fc:db:03:1e:57:23:72:df:1b:31:09:ca:00:
4a:31:30:f4:6e:86:ce:20:54:1c:0f:39:0b:bf:ad:
d2:ff:50:8f:c8:2d:90:5c:78:a8:d0:cd:7d:68:75:
7e:fa:a5:63:6f:cf:e0:b7:8f:9d:c8:e9:94:7a:58:
ec:2a:5e:12:0c:3a:86:90:75:36:86:4a:dd:db:6f:
c9:df:96:65:dc:31:a2:5a:dc:42:04:5c:b0:e5:4e:
38:21:74:a4:5d:9f:94:b8:23:b7:65:8b:e3:79:e6:
21:8a:a6:33:1e:25:5c:d8:6f:dd:fb:fc:f1:f1:af:
a2:c1:a0:57:c2:53:82:21:e4:a3:aa:ca:30:85:fc:
4e:a9:94:6c:6c:0d:31:21:ee:07:93:c3:0f:26:e3:
7d:db:d6:68:a0:40:f1:b7:a4:16:2b:51:a6:d9:50:
9b:5e:76:fc:cc:30:89:da:be:2d:d9:67:d5:43:6c:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:B3:D5:D0:9B:83:87:AD:FD:E4:92:79:BB:B8:92:13:4A:11:DC
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:3c:53:ce:ba:d6:ec:3d:f7:7e:cd:74:1f:12:c6:29:69:
b0:aa:d9:c5:d2:4d:0d:86:93:f0:06:f6:99:d7:ec:ea:34:39:
bd:d4:e7:a0:ac:93:6d:d5:f3:2f:bb:de:63:92:b9:69:03:95:
f1:0c:3d:1d:01:15:e7:5a:06:14:05:bd:74:99:4e:34:e2:cf:
69:ed:7a:85:6c:85:99:e8:9a:70:97:8d:5e:66:5b:39:10:90:
3d:7f:a1:1a:fb:1b:7b:89:08:86:3d:fa:a4:4c:76:2d:dc:33:
17:f0:04:ac:99:81:42:59:1a:4d:0d:66:96:5a:af:f8:45:3f:
94:53:40:87:76:e3:e6:18:3c:46:f4:66:87:6a:8e:8e:f7:a6:
c1:b9:51:90:03:21:3d:d0:0b:b5:f7:45:d9:64:0f:c7:18:50:
bd:ff:83:9d:cc:b3:fb:69:40:a3:86:65:6a:68:3f:32:ca:5e:
15:fe:31:62:e1:0c:d8:04:6d:ba:0a:f4:a6:02:93:af:56:54:
81:ed:f6:b9:40:1a:a4:ce:99:79:27:5d:b4:9f:1e:a7:2d:3f:
42:40:95:1e:2e:d5:92:3b:2f:2a:8a:a3:3f:76:02:99:b5:51:
c2:d3:d0:f0:b4:38:0c:dc:7a:68:24:c1:c8:24:10:f5:08:f8:
da:9b:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:48 2026 by rpki-client